Skip to content
OpenAdvisories

Vendor

KongHQ

1 known vulnerabilities.

Products

mcp-konnect 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-13341

    Prompt Injection and Credential Exposure via Untrusted Analytics Data in Kong Konnect MCP

    A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.

    KongHQ mcp-konnect